$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/058861ae-e954-34bc-90aa-559f4c481e3f.roa File: 058861ae-e954-34bc-90aa-559f4c481e3f.roa (raw, json) Hash identifier: sZ3sH8etMlgDR5KXP+nWqnr6vuxMCpfvQr/b75zKJro= Subject key identifier: 4C:A2:43:5F:EC:47:40:87:63:CB:46:C3:5C:0A:B0:FB:D6:7A:02:49 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584B99D790A928F86AB05C996100 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/058861ae-e954-34bc-90aa-559f4c481e3f.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 5050 IP address blocks: 192.70.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:90:a9:28:f8:6a:b0:5c:99:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=9b1d1802-de49-4211-a7ee-b085d3b69bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:98:35:0c:75:95:4f:e6:2a:f3:e1:84:a4:70: c4:ba:f7:33:53:b5:2b:63:b5:59:5e:61:22:b9:70: 65:60:ab:78:4c:17:35:9a:c8:77:df:c1:4f:f8:fb: c9:40:b7:d4:a1:df:d2:da:16:52:c2:93:ee:f3:37: 81:a8:e9:5b:1a:a5:74:ea:3f:e2:ed:a3:86:be:23: ab:b7:a5:db:38:8b:60:92:03:6d:00:a4:5c:23:16: 72:99:c8:33:21:5c:d0:08:d3:c5:b2:0f:4e:d8:3e: d2:ba:b5:ff:f9:60:58:6e:dc:ee:58:2b:5a:10:d9: 68:7b:d2:c9:cf:ea:be:05:f3:0a:bb:96:c6:99:a8: 9e:9f:ab:a9:01:62:27:cf:87:dd:c9:6f:1b:ff:40: 2f:b2:18:40:65:c9:ab:54:5b:67:78:51:83:2a:07: 03:d1:66:a5:54:82:6d:f2:27:cf:16:bb:40:f3:5f: 6b:d5:02:d8:24:c2:12:22:5b:e1:49:59:68:b8:e3: 56:4c:b0:0a:90:6a:fd:6f:02:44:49:1a:98:8f:4b: 44:95:53:f6:79:38:93:0d:a5:82:83:dd:16:7b:4c: 75:3c:8c:34:1b:ab:b4:31:68:8a:46:8c:ea:22:83: 98:6a:bd:54:ef:89:66:b8:51:6c:9e:2c:9a:06:02: 5f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A2:43:5F:EC:47:40:87:63:CB:46:C3:5C:0A:B0:FB:D6:7A:02:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/058861ae-e954-34bc-90aa-559f4c481e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 192.70.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e5:65:c0:0b:64:7d:d2:7e:17:94:64:5e:5f:ad:85:00:3b: 70:ca:ed:2f:a9:16:76:17:54:b9:a7:38:4b:4b:a6:fb:75:04: 86:3e:05:67:24:8b:ea:c8:d8:d9:a5:fc:5a:0e:47:19:4a:e8: 7d:00:8d:3b:07:04:3f:68:58:fb:ff:45:36:09:23:48:47:4e: 9e:24:ed:24:0e:ff:40:71:c0:d4:19:5c:37:20:c4:af:ff:d8: ba:f4:04:30:2d:74:dc:3e:78:f9:a5:0e:d1:d3:eb:50:6d:a1: eb:50:e0:35:70:d4:36:b6:cd:88:35:0c:d2:49:68:5b:60:d0: 3a:5f:a2:e3:d1:75:fe:e4:8d:5d:7f:c0:5b:60:c8:14:e2:4f: ee:c6:6a:d4:c2:d7:3f:59:5d:dc:09:77:8e:48:f1:57:d5:b3: b5:ad:f7:ef:44:6d:17:c2:09:b2:f4:32:72:3a:9e:d8:8f:40: e1:1d:e3:e8:dd:6c:ff:8d:03:c8:70:2a:23:06:f4:fe:2e:b5: 40:0c:bf:14:c6:5b:20:d3:40:b3:4b:9f:6e:f6:40:50:00:5e: 4f:f6:c5:34:07:6c:ab:fe:5d:7a:dd:a9:0d:60:3e:b2:6e:08: 58:16:3b:1e:6c:e7:ac:f6:6f:84:82:74:76:99:aa:61:1f:bd: 76:af:91:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15CpKPhqsFyZYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OWIxZDE4MDItZGU0OS00MjExLWE3ZWUtYjA4NWQzYjY5YmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpg1DHWVT+Yq8+GEpHDEuvczU7UrY7VZXmEi uXBlYKt4TBc1msh338FP+PvJQLfUod/S2hZSwpPu8zeBqOlbGqV06j/i7aOGviOr t6XbOItgkgNtAKRcIxZymcgzIVzQCNPFsg9O2D7SurX/+WBYbtzuWCtaENloe9LJ z+q+BfMKu5bGmaien6upAWInz4fdyW8b/0AvshhAZcmrVFtneFGDKgcD0WalVIJt 8ifPFrtA819r1QLYJMISIlvhSVlouONWTLAKkGr9bwJESRqYj0tElVP2eTiTDaWC g90We0x1PIw0G6u0MWiKRozqIoOYar1U74lmuFFsniyaBgJfSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyiQ1/sR0CHY8tGw1wKsPvWegJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvMDU4ODYxYWUtZTk1NC0z NGJjLTkwYWEtNTU5ZjRjNDgxZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEbeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/lZcALZH3SfheUZF5frYUAO3DK7S+pFnYXVLmnOEtLpvt1BIY+BWck i+rI2Nml/FoORxlK6H0AjTsHBD9oWPv/RTYJI0hHTp4k7SQO/0BxwNQZXDcgxK// 2Lr0BDAtdNw+ePmlDtHT61BtoetQ4DVw1Da2zYg1DNJJaFtg0DpfouPRdf7kjV1/ wFtgyBTiT+7GatTC1z9ZXdwJd45I8VfVs7Wt9+9EbRfCCbL0MnI6ntiPQOEd4+jd bP+NA8hwKiMG9P4utUAMvxTGWyDTQLNLn272QFAAXk/2xTQHbKv+XXrdqQ1gPrJu CFgWOx5s56z2b4SCdHaZqmEfvXavkaQ= -----END CERTIFICATE-----Generated at Mon Oct 27 18:03:00 2025 by rpki-client